Since I requested help on this, I'm moved to using the latest Report Viewer control which does everything my client required and is significantly less hassle than messing about with the security of Reporting Services.

Obviously the full blown Reporting Services does offer slightly more, but just maybe some other developers may find that it is worth taking a look at the Report Viewer control instead.

Hope it helps someone.